The performance of Shibboleth

[Kevin P. Foote]

On Tue, 17 Sep 2013, HaiJun Deng wrote:

> Chad La Joie wrote
>> Shibboleth will easily handle 1 million
>> requests simultaneously with less then 100ms response times given
>> sufficient hardware resources and network topology.
>
> At
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProdLoadTestResults
> <https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProdLoadTestResults>
> , it said " A single c1.xlarge instance running in the same fashion can
> achieve 300 transactions per second and is not susceptible to freezes or
> crashing during garbage collection.", it seems that the performance of
> shibboleth is not good, is it?

I do not belive you are thinking about this correctly.

Your use case puts 5k tps .. this is on the application. The SP is the
piece directly involved with the protected application side of things.

Also the test listed above was one example, not that there are many
more posted. However, what your IdP does tps wise is not reflective of
what your SP is doing nor what your actual protected app is doing.
People quite routinely have very large scale deployments of both the
Shib-IdP and SP in enterprise settings.

I would tend to believe the statement of Chads regardless of what TPS you 
are hoping to achive..

Generally speaking the IdP does exactly what it is supposed to do in a 
very efficient manor. Your time at IdP will vary greatly depending on
what back end systems your IdP relies on and how fast the access to
those resources is.

------
thanks
  kevin.foote